Put confirmation and maximum limit on transaction amount

app/assets/javascripts/transactions.js

@@ -70,6 +70,17 @@ ready = function() {
   });
   filters_body.hide();
 
+  $(form).submit(function(e) {
+    euros = parseInt($(form).find('input[name="transaction[euros]"]').val());
+    console.log(euros);
+    if (euros < 6) {
+      return true;
+    } else {
+      e.preventDefault();
+      return confirm("Are you sure? " + euros + " monies is a lot of money ...");
+    }
+  });
+
   $(form).on("ajax:before", function(xhr, settings) {
     $(flash_success).addClass("hidden");
     $(submit_button).val("Processing");

app/controllers/users_controller.rb

@@ -7,7 +7,7 @@ class UsersController < ApplicationController
   load_and_authorize_resource except: :show
 
   def show
-    @user = User.find_or_create_by(name: params[:id])
+    @user = User.find_by(name: params[:id])
     respond_to do |format|
       format.html { @transaction = Transaction.new }
       format.json { render json: @user }

app/models/user_ability.rb

@@ -6,6 +6,8 @@ class UserAbility
 
     can :manage, :all if user.penning?
     can :read, user, id: user.id
-    can :create, Transaction, debtor: user
+    can :create, Transaction do |t|
+      t.debtor == user && t.amount <= Rails.application.config.maximum_amount
+    end
   end
 end

app/views/transactions/_new.html.haml

@@ -14,5 +14,5 @@
       %span.glyphicon.glyphicon-euro
     = f.number_field :euros, value: amount(@transaction.amount),
         placeholder: "Bedrag", step: 0.01, min: (0.01 unless current_user.penning),
-        class: "form-control", size: 20, max: 100, required: true
+        class: "form-control", size: 20, max: Rails.application.config.maximum_amount/100, required: true
   = f.submit "Send it!", class: "pure-button pure-button-primary btn"

config/application.rb

@@ -25,5 +25,6 @@ module Tab
 
     # Which is the lowest balance you should be ashamed of.
     config.shameful_balance = 5000 # In eurocents!
+    config.maximum_amount = 3000
   end
 end